CWE 76

Failure to Resolve Equivalent Special Elements into a Different Plane

Weakness ID: 76 (Weakness Base)

Status: Draft

Description

Description Summary

The software fails to adequately filter non-typical special elements that are equivalent to control-relevant special elements that are already being filtered. This can also include encoded special characters.

Time of Introduction

Architecture and Design

Implementation

Applicable Platforms

Languages

All

Likelihood of Exploit

High to Very High

Potential Mitigations

Requirements specification: Programming languages and supporting technologies might be chosen which are not subject to these issues.

Phase: Implementation

Utilize an appropriate mix of white-list and black-list parsing to filter equivalent special element syntax from all input.